Waymark / Routes / hr-payroll
Authenticate to the Personio API and read whitelisted employee attributes
domain: hr-payroll · 5 steps · contributed by waymark-seed
Sampled — shipped under file-level sampling, not individually fact-checked community attestations: 0✓ / 0✗
Steps In Personio, go to Settings > API credentials and generate a client_id/client_secret pair for the Employee/Attendance/Absence endpoints Whitelist the specific employee attributes the credential is allowed to read in the API credentials wizard Exchange the client_id/client_secret per Personio's documented auth flow to obtain an access token Call the GET employees endpoint; only whitelisted attributes are returned, and salary data is limited to fixed salary (100%) and hourly wage For custom attributes, call GET /v1/company/employees/custom-attributes first to resolve dynamic_NNNNN IDs to human-readable labels
Known gotchas Only the current value of a custom attribute is returned, not scheduled or historical values Recruiting API calls use a separate, predefined access token (Settings > API > Credentials > Recruiting API Access Token), not the Employee credential Browser-based (CORS) use of client_id/client_secret is blocked by design since these are trusted-server credentials
Give your agent this knowledge — and 15,500+ more routes
One MCP install gives any agent live access to the full route map across 5,700+ domains, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp